@kensio/yulin 1.10.1 → 1.10.2

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.d.ts

@@ -0,0 +1,40 @@
+import { MappedFactory } from "@kensio/part-factory";
+import type { CfnTemplateBodyRecord } from "../../template/sim-cfn-template.js";
+import type { SimCfnTemplateValueRecord } from "../../template/value/sim-cfn-template-value.js";
+/**
+ * What a test asks for when it wants the template CDK synthesizes around a
+ * `BucketDeployment`.
+ *
+ * One construct becomes four Resources, only one of which this simulator
+ * creates. The other three are the provider CDK would have run: an AWS CLI
+ * Layer, a Python function, and that function's log group. A second deployment
+ * adds another Layer and another custom Resource, and shares the one provider,
+ * because CDK builds the function as a singleton.
+ *
+ * The logical IDs here are readable rather than the hashed ones CDK generates.
+ * That is the point: nothing recognising this scaffolding is allowed to match
+ * on a name CDK made up.
+ */
+export interface SimCdkProviderScaffoldingTemplateInput {
+    readonly bucketName: string;
+    /** The staged asset object key each deployment copies from, in turn. */
+    readonly sourceObjectKeys: readonly string[];
+    /** Resources a test adds beside the scaffolding. */
+    readonly resources: SimCfnTemplateValueRecord;
+}
+/**
+ * Builds the template CDK synthesizes for one or more `BucketDeployment`
+ * constructs sharing a destination Bucket.
+ *
+ * ```typescript
+ * const template = simCdkProviderScaffoldingTemplateFactory.make({
+ *   sourceObjectKeys: ["site.zip", "fonts.zip"],
+ * });
+ * ```
+ *
+ * The asset object keys have to match an assets manifest beside the template
+ * file for the deployments themselves to copy anything, so a test using this
+ * writes both.
+ */
+export declare const simCdkProviderScaffoldingTemplateFactory: MappedFactory<SimCdkProviderScaffoldingTemplateInput, CfnTemplateBodyRecord, undefined>;
+//# sourceMappingURL=sim-cdk-provider-scaffolding-template.factory.d.ts.map

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-provider-scaffolding-template.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAEhG;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;CAC/C;AAgBD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wCAAwC,yFA8CpD,CAAC"}

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.js

@@ -0,0 +1,107 @@
+import { MappedFactory } from "@kensio/part-factory";
+const providerLogicalId = "BucketDeploymentProvider";
+const assetsBucketName = "cdk-hnb659fds-assets-111111111111-eu-west-2";
+const assumeRolePolicyDocument = {
+    Version: "2012-10-17",
+    Statement: [
+        {
+            Effect: "Allow",
+            Principal: { Service: "lambda.amazonaws.com" },
+            Action: "sts:AssumeRole",
+        },
+    ],
+};
+/**
+ * Builds the template CDK synthesizes for one or more `BucketDeployment`
+ * constructs sharing a destination Bucket.
+ *
+ * ```typescript
+ * const template = simCdkProviderScaffoldingTemplateFactory.make({
+ *   sourceObjectKeys: ["site.zip", "fonts.zip"],
+ * });
+ * ```
+ *
+ * The asset object keys have to match an assets manifest beside the template
+ * file for the deployments themselves to copy anything, so a test using this
+ * writes both.
+ */
+export const simCdkProviderScaffoldingTemplateFactory = new MappedFactory(() => ({
+    bucketName: "site-bucket",
+    sourceObjectKeys: ["site.zip"],
+    resources: {},
+}), (input) => ({
+    Resources: {
+        SiteBucket: {
+            Type: "AWS::S3::Bucket",
+            Properties: { BucketName: input.bucketName },
+        },
+        [`${providerLogicalId}Role`]: {
+            Type: "AWS::IAM::Role",
+            Properties: {
+                RoleName: "bucket-deployment-provider-role",
+                AssumeRolePolicyDocument: assumeRolePolicyDocument,
+            },
+        },
+        [providerLogicalId]: {
+            Type: "AWS::Lambda::Function",
+            Properties: {
+                Code: { S3Bucket: assetsBucketName, S3Key: "provider.zip" },
+                Handler: "index.handler",
+                Layers: [{ Ref: `${deploymentPrefix(0)}AwsCliLayer` }],
+                Role: { "Fn::GetAtt": [`${providerLogicalId}Role`, "Arn"] },
+                Runtime: "python3.13",
+                Timeout: 900,
+            },
+        },
+        [`${providerLogicalId}LogGroup`]: {
+            Type: "AWS::Logs::LogGroup",
+            Properties: {
+                LogGroupName: {
+                    "Fn::Join": ["", ["/aws/lambda/", { Ref: providerLogicalId }]],
+                },
+                RetentionInDays: 731,
+            },
+        },
+        ...deploymentResources(input),
+        ...input.resources,
+    },
+}));
+/**
+ * The Layer and custom Resource each deployment contributes.
+ *
+ * Every deployment gets its own AWS CLI Layer, and only the first one's is
+ * named by the shared provider function's `Layers`, so the rest are reachable
+ * from nothing in the template. That is why a Layer is recognised on what it
+ * is rather than on what points at it.
+ */
+function deploymentResources(input) {
+    const resources = {};
+    for (const [index, sourceObjectKey] of input.sourceObjectKeys.entries()) {
+        const prefix = deploymentPrefix(index);
+        resources[`${prefix}AwsCliLayer`] = {
+            Type: "AWS::Lambda::LayerVersion",
+            Properties: {
+                Content: {
+                    S3Bucket: assetsBucketName,
+                    S3Key: "awscli.zip",
+                },
+                Description: "/opt/awscli/aws",
+            },
+        };
+        resources[`${prefix}CustomResource`] = {
+            Type: "Custom::CDKBucketDeployment",
+            Properties: {
+                ServiceToken: { "Fn::GetAtt": [providerLogicalId, "Arn"] },
+                SourceBucketNames: [assetsBucketName],
+                SourceObjectKeys: [sourceObjectKey],
+                DestinationBucketName: { Ref: "SiteBucket" },
+                Prune: index === 0,
+            },
+        };
+    }
+    return resources;
+}
+function deploymentPrefix(index) {
+    return `Deploy${index}`;
+}
+//# sourceMappingURL=sim-cdk-provider-scaffolding-template.factory.js.map

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-provider-scaffolding-template.factory.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding-template.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA2BrD,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AAEvE,MAAM,wBAAwB,GAAG;IAC/B,OAAO,EAAE,YAAY;IACrB,SAAS,EAAE;QACT;YACE,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;YAC9C,MAAM,EAAE,gBAAgB;SACzB;KACF;CACF,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,wCAAwC,GAAG,IAAI,aAAa,CAIvE,GAAG,EAAE,CAAC,CAAC;IACL,UAAU,EAAE,aAAa;IACzB,gBAAgB,EAAE,CAAC,UAAU,CAAC;IAC9B,SAAS,EAAE,EAAE;CACd,CAAC,EACF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACV,SAAS,EAAE;QACT,UAAU,EAAE;YACV,IAAI,EAAE,iBAAiB;YACvB,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE;SAC7C;QACD,CAAC,GAAG,iBAAiB,MAAM,CAAC,EAAE;YAC5B,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE;gBACV,QAAQ,EAAE,iCAAiC;gBAC3C,wBAAwB,EAAE,wBAAwB;aACnD;SACF;QACD,CAAC,iBAAiB,CAAC,EAAE;YACnB,IAAI,EAAE,uBAAuB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE;gBAC3D,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;gBACtD,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,GAAG,iBAAiB,MAAM,EAAE,KAAK,CAAC,EAAE;gBAC3D,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,GAAG;aACb;SACF;QACD,CAAC,GAAG,iBAAiB,UAAU,CAAC,EAAE;YAChC,IAAI,EAAE,qBAAqB;YAC3B,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;iBAC/D;gBACD,eAAe,EAAE,GAAG;aACrB;SACF;QACD,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAC7B,GAAG,KAAK,CAAC,SAAS;KACnB;CACF,CAAC,CACH,CAAC;AAEF;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAC1B,KAA6C;IAE7C,MAAM,SAAS,GAA8B,EAAE,CAAC;IAEhD,KAAK,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAEvC,SAAS,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG;YAClC,IAAI,EAAE,2BAA2B;YACjC,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,QAAQ,EAAE,gBAAgB;oBAC1B,KAAK,EAAE,YAAY;iBACpB;gBACD,WAAW,EAAE,iBAAiB;aAC/B;SACF,CAAC;QAEF,SAAS,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG;YACrC,IAAI,EAAE,6BAA6B;YACnC,UAAU,EAAE;gBACV,YAAY,EAAE,EAAE,YAAY,EAAE,CAAC,iBAAiB,EAAE,KAAK,CAAC,EAAE;gBAC1D,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;gBACrC,gBAAgB,EAAE,CAAC,eAAe,CAAC;gBACnC,qBAAqB,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE;gBAC5C,KAAK,EAAE,KAAK,KAAK,CAAC;aACnB;SACF,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,SAAS,KAAK,EAAE,CAAC;AAC1B,CAAC"}

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.d.ts

@@ -0,0 +1,66 @@
+import type { SimCfnResource } from "../../resource/sim-cfn-resource.js";
+/**
+ * The Resources in a Stack that exist only to run a CDK custom Resource sim
+ * CloudFormation carries out itself.
+ *
+ * CDK reaches a feature it has no CloudFormation Resource type for by writing a
+ * `Custom::` Resource and a Lambda function to answer it. Where this simulator
+ * creates that custom Resource directly, as it does for `BucketDeployment` and
+ * Bucket notifications, the function is left holding nothing: it is never
+ * invoked, so its code is never loaded and its log group never written to. The
+ * work is already done by the time anything would have called it.
+ *
+ * That makes the function and its log group Resources no test can tell apart
+ * from ones that were created, which is the same reason a Resource type nothing
+ * simulates has for being reported as a skip, arrived at from the opposite
+ * direction. Reporting them as skips is worse than saying nothing: CDK's
+ * provider is a Python function, so the skip reads "bind a real in-process
+ * handler to this function to simulate it", which is advice that would replace
+ * a working simulation with a hand-written one.
+ *
+ * The recognition is by association rather than by name. CDK's logical IDs are
+ * generated from construct paths and a hash, and are not an interface anything
+ * should match on; the link from a custom Resource to its provider through
+ * `ServiceToken` is one CloudFormation itself relies on.
+ */
+export declare class SimCdkProviderScaffolding {
+    #private;
+    constructor(resources: ReadonlyMap<string, SimCfnResource>);
+    /**
+     * Why this Resource is scaffolding for a custom Resource this simulator has
+     * already carried out, or undefined when it is not.
+     */
+    reasonFor(resource: SimCfnResource): string | undefined;
+    /**
+     * The Resource is the provider function itself.
+     */
+    private providerFunctionReason;
+    /**
+     * The Resource is the log group of a provider function.
+     *
+     * A newer CDK writes the provider function's log group into the template
+     * rather than leaving Lambda to create it, and names the function in it, so
+     * the same association finds it. Only a log group is looked for this way: the
+     * provider's IAM Role and Policy name it too, and those this simulator
+     * creates for real.
+     */
+    private providerLogGroupReason;
+    /**
+     * Each provider function in this Stack, against the custom Resource type it
+     * answers for.
+     *
+     * A `Custom::` Resource names its provider in `ServiceToken`, usually as an
+     * `Fn::GetAtt` for the function's ARN. Reading it through the ordinary node
+     * parser takes every form CloudFormation accepts, and keeping only names that
+     * are Lambda functions in this Stack leaves out a `ServiceToken` pointing at
+     * a function deployed somewhere else, which is not this Stack's to reason
+     * about.
+     *
+     * One provider answers every custom Resource of its type in a Stack, since
+     * CDK builds it as a singleton, so the first type to claim a function is the
+     * one reported against it.
+     */
+    private findProviderFunctions;
+    private functionsNamedBy;
+}
+//# sourceMappingURL=sim-cdk-provider-scaffolding.d.ts.map

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-provider-scaffolding.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAQzE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,yBAAyB;;IAIpC,YAAY,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,EAGzD;IAED;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAKtD;IAED;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAa9B;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,gBAAgB;CAezB"}

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.js

@@ -0,0 +1,133 @@
+import { simCdkCustomResourceFactories } from "../../resource/resolve/service/sim-cfn-custom-resource-factories.js";
+import { parseSimCfnNode } from "../../template/parse/node/sim-cfn-node-parser.js";
+const customResourceTypePrefix = "Custom::";
+const lambdaFunctionResourceType = "AWS::Lambda::Function";
+const logGroupResourceType = "AWS::Logs::LogGroup";
+/**
+ * The Resources in a Stack that exist only to run a CDK custom Resource sim
+ * CloudFormation carries out itself.
+ *
+ * CDK reaches a feature it has no CloudFormation Resource type for by writing a
+ * `Custom::` Resource and a Lambda function to answer it. Where this simulator
+ * creates that custom Resource directly, as it does for `BucketDeployment` and
+ * Bucket notifications, the function is left holding nothing: it is never
+ * invoked, so its code is never loaded and its log group never written to. The
+ * work is already done by the time anything would have called it.
+ *
+ * That makes the function and its log group Resources no test can tell apart
+ * from ones that were created, which is the same reason a Resource type nothing
+ * simulates has for being reported as a skip, arrived at from the opposite
+ * direction. Reporting them as skips is worse than saying nothing: CDK's
+ * provider is a Python function, so the skip reads "bind a real in-process
+ * handler to this function to simulate it", which is advice that would replace
+ * a working simulation with a hand-written one.
+ *
+ * The recognition is by association rather than by name. CDK's logical IDs are
+ * generated from construct paths and a hash, and are not an interface anything
+ * should match on; the link from a custom Resource to its provider through
+ * `ServiceToken` is one CloudFormation itself relies on.
+ */
+export class SimCdkProviderScaffolding {
+    #resources;
+    #providerFunctions;
+    constructor(resources) {
+        this.#resources = resources;
+        this.#providerFunctions = this.findProviderFunctions();
+    }
+    /**
+     * Why this Resource is scaffolding for a custom Resource this simulator has
+     * already carried out, or undefined when it is not.
+     */
+    reasonFor(resource) {
+        return (this.providerFunctionReason(resource) ??
+            this.providerLogGroupReason(resource));
+    }
+    /**
+     * The Resource is the provider function itself.
+     */
+    providerFunctionReason(resource) {
+        const customResourceType = this.#providerFunctions.get(resource.logicalId);
+        if (customResourceType === undefined) {
+            return undefined;
+        }
+        return (`sim CloudFormation carries out ${customResourceType} itself, so CDK's ` +
+            `provider function for it is never invoked`);
+    }
+    /**
+     * The Resource is the log group of a provider function.
+     *
+     * A newer CDK writes the provider function's log group into the template
+     * rather than leaving Lambda to create it, and names the function in it, so
+     * the same association finds it. Only a log group is looked for this way: the
+     * provider's IAM Role and Policy name it too, and those this simulator
+     * creates for real.
+     */
+    providerLogGroupReason(resource) {
+        if (resource.type !== logGroupResourceType) {
+            return undefined;
+        }
+        const customResourceType = resource
+            .dependencies()
+            .map((logicalId) => this.#providerFunctions.get(logicalId))
+            .find((found) => found !== undefined);
+        if (customResourceType === undefined) {
+            return undefined;
+        }
+        return (`the log group of CDK's ${customResourceType} provider function, which ` +
+            `sim CloudFormation never invokes, so nothing is ever written to it`);
+    }
+    /**
+     * Each provider function in this Stack, against the custom Resource type it
+     * answers for.
+     *
+     * A `Custom::` Resource names its provider in `ServiceToken`, usually as an
+     * `Fn::GetAtt` for the function's ARN. Reading it through the ordinary node
+     * parser takes every form CloudFormation accepts, and keeping only names that
+     * are Lambda functions in this Stack leaves out a `ServiceToken` pointing at
+     * a function deployed somewhere else, which is not this Stack's to reason
+     * about.
+     *
+     * One provider answers every custom Resource of its type in a Stack, since
+     * CDK builds it as a singleton, so the first type to claim a function is the
+     * one reported against it.
+     */
+    findProviderFunctions() {
+        const found = new Map();
+        for (const resource of this.#resources.values()) {
+            const customResourceType = simulatedCustomResourceType(resource);
+            if (customResourceType === undefined) {
+                continue;
+            }
+            for (const logicalId of this.functionsNamedBy(resource)) {
+                if (!found.has(logicalId)) {
+                    found.set(logicalId, customResourceType);
+                }
+            }
+        }
+        return found;
+    }
+    functionsNamedBy(customResource) {
+        const serviceToken = customResource.properties["ServiceToken"];
+        if (serviceToken === undefined) {
+            return [];
+        }
+        return parseSimCfnNode(serviceToken)
+            .referencedNames()
+            .filter((logicalId) => {
+            return (this.#resources.get(logicalId)?.type === lambdaFunctionResourceType);
+        });
+    }
+}
+/**
+ * The custom Resource type this Resource is, when it is one this simulator
+ * creates itself rather than by running a provider.
+ */
+function simulatedCustomResourceType(resource) {
+    const { type } = resource;
+    if (type === undefined || !type.startsWith(customResourceTypePrefix)) {
+        return undefined;
+    }
+    const resourceTypeName = type.slice(customResourceTypePrefix.length);
+    return simCdkCustomResourceFactories.has(resourceTypeName) ? type : undefined;
+}
+//# sourceMappingURL=sim-cdk-provider-scaffolding.js.map

package/dist/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-provider-scaffolding.js","sourceRoot":"","sources":["../../../../../src/service/cloudformation/cdk/provider/sim-cdk-provider-scaffolding.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAC;AACpH,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAEnF,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAC5C,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAC3D,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,yBAAyB;IAC3B,UAAU,CAAsC;IAChD,kBAAkB,CAA8B;IAEzD,YAAY,SAA8C;QACxD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,QAAwB;QAChC,OAAO,CACL,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;YACrC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAAwB;QACrD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE3E,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,CACL,kCAAkC,kBAAkB,oBAAoB;YACxE,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,sBAAsB,CAAC,QAAwB;QACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC3C,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,kBAAkB,GAAG,QAAQ;aAChC,YAAY,EAAE;aACd,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;aAC1D,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAExC,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,CACL,0BAA0B,kBAAkB,4BAA4B;YACxE,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,qBAAqB;QAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAExC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YAChD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YAEjE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1B,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,cAA8B;QACrD,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE/D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,eAAe,CAAC,YAAY,CAAC;aACjC,eAAe,EAAE;aACjB,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACpB,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,KAAK,0BAA0B,CACpE,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,2BAA2B,CAClC,QAAwB;IAExB,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IAE1B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAErE,OAAO,6BAA6B,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.d.ts

@@ -25,8 +25,13 @@ export declare class SimCdkBucketDeployCopier {
     constructor(properties: SimCdkBucketDeployCopierProperties);
     /**
      * Copy every source directory into the Bucket, then prune what is left over.
+     *
+     * The keys it deployed are answered rather than kept, because they are what
+     * the deployment can say for certain about the Bucket: storage that holds
+     * Objects holds their headers with them, and storage that maps them onto
+     * files has only the deployment's word for what they are.
      */
-    copy(sourceDirectoryPaths: readonly string[]): Promise<void>;
+    copy(sourceDirectoryPaths: readonly string[]): Promise<ReadonlySet<string>>;
     /**
      * Copy the files one source directory holds and the filters select.
      */

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cdk-bucket-deploy-copier.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAE7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAKpG,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;CACnD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD,YAAY,UAAU,EAAE,kCAAkC,EAYzD;IAED;;OAEG;IACG,IAAI,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBjE;IAED;;OAEG;YACW,aAAa;CAa5B"}
+{"version":3,"file":"sim-cdk-bucket-deploy-copier.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAE7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAKpG,UAAU,kCAAkC;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;CACnD;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAElD,YAAY,UAAU,EAAE,kCAAkC,EAYzD;IAED;;;;;;;OAOG;IACG,IAAI,CACR,oBAAoB,EAAE,SAAS,MAAM,EAAE,GACtC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAmB9B;IAED;;OAEG;YACW,aAAa;CAa5B"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.js

@@ -35,13 +35,18 @@ export class SimCdkBucketDeployCopier {
     }
     /**
      * Copy every source directory into the Bucket, then prune what is left over.
+     *
+     * The keys it deployed are answered rather than kept, because they are what
+     * the deployment can say for certain about the Bucket: storage that holds
+     * Objects holds their headers with them, and storage that maps them onto
+     * files has only the deployment's word for what they are.
      */
     async copy(sourceDirectoryPaths) {
         const deployedKeys = new Set();
         // One source at a time, because two of them can hold the same path and the
         // sync the provider function runs lets the later one win.
         for (const sourceDirectoryPath of sourceDirectoryPaths) {
-            // eslint-disable-next-line no-await-in-loop -- sources are copied in the order the deployment lists them
+            // oxlint-disable-next-line no-await-in-loop -- sources are copied in the order the deployment lists them
             const keys = await this.copyDirectory(sourceDirectoryPath);
             for (const key of keys) {
                 deployedKeys.add(key);
@@ -50,6 +55,7 @@ export class SimCdkBucketDeployCopier {
         if (this.properties.prune) {
             await this.pruner.prune(deployedKeys);
         }
+        return deployedKeys;
     }
     /**
      * Copy the files one source directory holds and the filters select.

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cdk-bucket-deploy-copier.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAO7E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,UAAU,CAA+B;IACzC,MAAM,CAA2B;IACjC,IAAI,CAAyB;IAC7B,MAAM,CAA2B;IAElD,YAAY,UAA8C;QACxD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;YAChC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,oBAAoB;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,oBAAuC;QAChD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,2EAA2E;QAC3E,0DAA0D;QAC1D,KAAK,MAAM,mBAAmB,IAAI,oBAAoB,EAAE,CAAC;YACvD,yGAAyG;YACzG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YAE3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,mBAA2B;QAE3B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;QAEzE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,aAAa;aACV,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;aAC5D,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAClD,CACJ,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cdk-bucket-deploy-copier.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-copier.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAO7E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,UAAU,CAA+B;IACzC,MAAM,CAA2B;IACjC,IAAI,CAAyB;IAC7B,MAAM,CAA2B;IAElD,YAAY,UAA8C;QACxD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;YAChC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,sBAAsB,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAwB,CAAC;YACzC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,oBAAoB;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,oBAAuC;QAEvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,2EAA2E;QAC3E,0DAA0D;QAC1D,KAAK,MAAM,mBAAmB,IAAI,oBAAoB,EAAE,CAAC;YACvD,yGAAyG;YACzG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;YAE3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,mBAA2B;QAE3B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;QAEzE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,aAAa;aACV,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;aAC5D,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAClD,CACJ,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-file.js

@@ -20,7 +20,7 @@ export class SimCdkBucketDeployFile {
      */
     async copy(sourceDirectoryPath, relativePath) {
         const key = this.properties.objectKey(relativePath);
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
         const body = await readFile(path.join(sourceDirectoryPath, relativePath));
         await this.bucket.putObject(new SimS3Object({ key, body, metadata: this.metadata(relativePath) }));
         return key;

package/dist/service/cloudformation/cdk/s3/bucket-deployment/copy/sim-cdk-bucket-deploy-files.js

@@ -15,7 +15,7 @@ export async function simCdkBucketDeployFiles(directoryPath) {
     return await filesUnder(directoryPath, directoryPath);
 }
 async function filesUnder(rootPath, directoryPath) {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    // oxlint-disable-next-line security/detect-non-literal-fs-filename
     const entries = await readdir(directoryPath, { withFileTypes: true });
     const relativePaths = [];
     const nested = [];
@@ -55,7 +55,7 @@ async function linkedFile(rootPath, entryPath) {
 async function linkedStats(entryPath) {
     try {
         // `stat` rather than `lstat`, so the link is followed to what it names.
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        // oxlint-disable-next-line security/detect-non-literal-fs-filename
         return await stat(entryPath);
     }
     catch {

package/dist/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.d.ts

@@ -0,0 +1,14 @@
+import type { SimS3Bucket } from "../../../../../s3/bucket/sim-s3-bucket.js";
+import type { SimCfnResource, SimCloudFormationResourceCreateContext } from "../../../../resource/sim-cfn-resource.js";
+import type { SimCdkBucketDeployProperties } from "../property/sim-cdk-bucket-deploy-properties.js";
+/**
+ * The simulated Bucket a deployment publishes into.
+ *
+ * A deployment names its destination rather than referring to it, so the Bucket
+ * is found by name, in the account and Region the Resource itself belongs to.
+ * It has to be there: the provider function runs after the Bucket is created,
+ * and a deployment into a Bucket that does not exist is a template saying
+ * something that cannot happen rather than something to work around.
+ */
+export declare function simCdkBucketDeployDestination(resource: SimCfnResource, properties: SimCdkBucketDeployProperties, context: SimCloudFormationResourceCreateContext): SimS3Bucket;
+//# sourceMappingURL=sim-cdk-bucket-deploy-destination.d.ts.map

package/dist/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-destination.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,KAAK,EACV,cAAc,EACd,sCAAsC,EACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAEpG;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,4BAA4B,EACxC,OAAO,EAAE,sCAAsC,GAC9C,WAAW,CAab"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.js

@@ -0,0 +1,20 @@
+import { assertDefined } from "../../../../../../util/type-guard/defined.js";
+/**
+ * The simulated Bucket a deployment publishes into.
+ *
+ * A deployment names its destination rather than referring to it, so the Bucket
+ * is found by name, in the account and Region the Resource itself belongs to.
+ * It has to be there: the provider function runs after the Bucket is created,
+ * and a deployment into a Bucket that does not exist is a template saying
+ * something that cannot happen rather than something to work around.
+ */
+export function simCdkBucketDeployDestination(resource, properties, context) {
+    const { accountId, regionName } = resource.accountRegionScope;
+    const bucket = context.simAws
+        .accountRegionScope(accountId, regionName)
+        .s3()
+        .getSimBucketByName(properties.destinationBucketName);
+    assertDefined(bucket, `Custom::CDKBucketDeployment destination Bucket ${properties.destinationBucketName} does not exist`);
+    return bucket;
+}
+//# sourceMappingURL=sim-cdk-bucket-deploy-destination.js.map

package/dist/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-destination.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/destination/sim-cdk-bucket-deploy-destination.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAQ7E;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAwB,EACxB,UAAwC,EACxC,OAA+C;IAE/C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;SAC1B,kBAAkB,CAAC,SAAS,EAAE,UAAU,CAAC;SACzC,EAAE,EAAE;SACJ,kBAAkB,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAExD,aAAa,CACX,MAAM,EACN,kDAAkD,UAAU,CAAC,qBAAqB,iBAAiB,CACpG,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/filter/sim-cdk-bucket-deploy-filter.js

@@ -65,12 +65,18 @@ function filterExpression(pattern) {
     // Runs of stars collapse to one first. A star already crosses `/`, so `**`
     // means what `*` means, and leaving it would compile to `.*.*` and give the
     // engine a needless amount of backtracking to do on a long near miss.
+    //
+    // Stars the pattern keeps apart still compile to a `.*` each, and enough of
+    // those is slow on a near miss whatever the runs do. That is left alone: a
+    // filter pattern is written into a `BucketDeployment` by whoever wrote the
+    // template, never carried on a request, so the only run a pathological one
+    // can hold up is their own.
     const expression = pattern
         .replaceAll(/\*+/gu, "*")
         .replaceAll(/[$()*+.?[\\\]^{|}]/gu, String.raw `\$&`)
         .replaceAll(String.raw `\*`, ".*")
         .replaceAll(String.raw `\?`, ".");
-    // eslint-disable-next-line security/detect-non-literal-regexp -- built from an escaped template pattern, not from anything a request carries
+    // oxlint-disable-next-line security/detect-non-literal-regexp -- built from an escaped template pattern, not from anything a request carries
     return new RegExp(`^${expression}$`, "u");
 }
 //# sourceMappingURL=sim-cdk-bucket-deploy-filter.js.map

package/dist/service/cloudformation/cdk/s3/bucket-deployment/filter/sim-cdk-bucket-deploy-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cdk-bucket-deploy-filter.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/filter/sim-cdk-bucket-deploy-filter.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAwB;IAE9C,YAAY,UAA8C;QACxD,IAAI,CAAC,KAAK,GAAG;YACX,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,YAAoB;QAC3B,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU;IAKH,QAAQ;IAJF,UAAU,CAAS;IAEpC,YACE,OAAe,EACN,QAAiB;wBAAjB,QAAQ;QAEjB,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,YAAoB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,oBAAoB;YACpE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,UAAU,GAAG,OAAO;SACvB,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;SACxB,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC;SACnD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,IAAI,CAAC;SAChC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnC,6IAA6I;IAC7I,OAAO,IAAI,MAAM,CAAC,IAAI,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"sim-cdk-bucket-deploy-filter.js","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/filter/sim-cdk-bucket-deploy-filter.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAwB;IAE9C,YAAY,UAA8C;QACxD,IAAI,CAAC,KAAK,GAAG;YACX,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtE,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,YAAoB;QAC3B,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU;IAKH,QAAQ;IAJF,UAAU,CAAS;IAEpC,YACE,OAAe,EACN,QAAiB;wBAAjB,QAAQ;QAEjB,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,YAAoB;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,oBAAoB;YACpE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,+DAA+D;IAC/D,EAAE;IACF,2EAA2E;IAC3E,4EAA4E;IAC5E,sEAAsE;IACtE,EAAE;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,4BAA4B;IAC5B,MAAM,UAAU,GAAG,OAAO;SACvB,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;SACxB,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAA,KAAK,CAAC;SACnD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,IAAI,CAAC;SAChC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAA,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnC,6IAA6I;IAC7I,OAAO,IAAI,MAAM,CAAC,IAAI,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC"}

package/dist/service/cloudformation/cdk/s3/bucket-deployment/metadata/sim-cdk-bucket-deploy-metadata.d.ts

@@ -0,0 +1,58 @@
+import type { SimCfnResource } from "../../../../resource/sim-cfn-resource.js";
+import type { SimS3Bucket } from "../../../../../s3/bucket/sim-s3-bucket.js";
+import type { SimS3SystemMetadataDeclaration } from "../../../../../s3/object/s3-system-metadata-declaration.type.js";
+import { type SimS3SystemMetadataValues } from "../../../../../s3/object/s3-system-metadata.js";
+import type { SimCdkBucketDeployProperties } from "../property/sim-cdk-bucket-deploy-properties.js";
+interface SimCdkBucketDeployMetadataProperties {
+    readonly properties: SimCdkBucketDeployProperties;
+    /** The Object keys this deployment put into the Bucket. */
+    readonly publishedKeys: ReadonlySet<string>;
+}
+/**
+ * What a `BucketDeployment` says S3 reports about the Objects it published.
+ *
+ * The deployment sets these headers on each Object it copies, and an Object
+ * keeps them, so nothing reads this while the Bucket is holding what was
+ * deployed. It is read when the storage under those Objects is replaced by a
+ * mounted directory, which is the local development arrangement: the site is
+ * served out of the generator's output as it is rebuilt, from the Bucket the
+ * deployment describes, and the files on disk carry none of what it set.
+ *
+ * The keys it published are what it is sure of. Its destination prefix and its
+ * filters are the rule behind them, which is all there is to go on for a file a
+ * later build added, and is a guess rather than a fact: two deployments can
+ * publish into one prefix and be told apart only by what their sources hold.
+ */
+export declare class SimCdkBucketDeployMetadata implements SimS3SystemMetadataDeclaration {
+    readonly metadata: SimS3SystemMetadataValues;
+    private readonly keyPrefix;
+    private readonly filter;
+    private readonly publishedKeys;
+    constructor(properties: SimCdkBucketDeployMetadataProperties);
+    /** Whether this deployment put the Object under a key into the Bucket. */
+    describes(objectKey: string): boolean;
+    /**
+     * Whether this deployment would publish a file under a key.
+     *
+     * The deployment's own rule: under its destination prefix, and selected by
+     * its filters, matched against the path relative to the prefix the way the
+     * sync matches it against the path relative to the source root.
+     */
+    wouldDescribe(objectKey: string): boolean;
+}
+interface SimCdkBucketDeployDeclareProperties extends SimCdkBucketDeployMetadataProperties {
+    readonly bucket: SimS3Bucket;
+    readonly resource: SimCfnResource;
+}
+/**
+ * Tell the destination Bucket what this deployment publishes.
+ *
+ * The declaration is kept against the Resource it came from, so a Stack
+ * redeployed into a running simulator is the same deployment saying its headers
+ * again rather than a second one agreeing with it. Two deployments into one
+ * Bucket are two Resources and keep two declarations, which is what lets each
+ * describe its own files.
+ */
+export declare function declareSimCdkBucketDeployMetadata(properties: SimCdkBucketDeployDeclareProperties): void;
+export {};
+//# sourceMappingURL=sim-cdk-bucket-deploy-metadata.d.ts.map

package/dist/service/cloudformation/cdk/s3/bucket-deployment/metadata/sim-cdk-bucket-deploy-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cdk-bucket-deploy-metadata.d.ts","sourceRoot":"","sources":["../../../../../../../src/service/cloudformation/cdk/s3/bucket-deployment/metadata/sim-cdk-bucket-deploy-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iEAAiE,CAAC;AACtH,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,gDAAgD,CAAC;AAExD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAEpG,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAElD,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,0BAA2B,YAAW,8BAA8B;IAC/E,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAE7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IAEpD,YAAY,UAAU,EAAE,oCAAoC,EAU3D;IAED,0EAA0E;IAC1E,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEpC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAKxC;CACF;AAED,UAAU,mCAAoC,SAAQ,oCAAoC;IACxF,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,mCAAmC,GAC9C,IAAI,CAON"}